Safeguard Reference Manual (G06.29+, H06.08+, J06.03+)

Event-Exit-Process Commands
Safeguard Reference Manual — 520618-030
15 - 3
ADD EVENT-EXIT-PROCESS Command
CPU [ cpu-number | ANY ]
PRI [ priority ]
PARAM-TEXT [ startup-param-text ]
ENABLED { ON | OFF }
defines whether the security event exit is enabled. ON indicates that the event
exit is enabled and that the Safeguard sof
tware is to start the event-exit
process and send designated security event messages to the process. If
another process with the same name is running when the event-exit process is
enabled, Safeguard kills that process before starting the event-exit process.
OFF indicates that the Safeguard software is not to start the event-exit
process.
The PROG object file must be specified before (or in the same command)
ENA
BLED is set to ON.
The default value is OFF. If you omit this attribute, it is set to the default value.
RESPONSE-TIMEOUT [ n [ SECONDS ] ]
specifies the number of seconds, from 1 through 900, that the Safeguard
software is to wait for the event-exit process to respond to an event.
If a timeout occurs and the request is for a password-quality or authorization
event from an undeniable user, the event proceeds with the check performed
by the Safeguard software. Locally authenticated super-group members are
undeniable users. All other users are considered deniable users.
If a timeout occurs and the request is for a password-quality event from a
deniable user, the request is denied.
If a timeout occurs when the attribute TIMEOUT-ALL-AUTHZREQ is set to ON,
and the request is for an authorization event from a deniable user, then the
request is denied. If the attribute TIMEOUT-ALL-AUTHZREQ is set to OFF,
then the deniable user waits indefinitely with neither approval nor denial.
If a timeout occurs and the request is for authentication by any user
, the
request is denied.
The default value is five seconds. If you o
mit this attribute, it is set to the
default value.
TIMEOUT-ALL-AUTHZREQ { ON | OFF }
specifies whether authorization request from a deniable user will be timed out.
A time out occurs if the response is not recieved from SEEP within the window
indicated by the RESPONSE-TIMEOUT attribute. ON indicates that
authorization request
s from all users are timed out. OFF indicates that only
requests from undeniable users are subject to timeout and the deniable users
wait indefinitely with neither approval nor denial to proceed with the request.